Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/b08bf78f50afc3050da468b788897077af313a27.roa
File:                     b08bf78f50afc3050da468b788897077af313a27.roa (raw, json)
Hash identifier:          vNFvQsfARz9om+1eWyxhs5twAp6tBgSKDazvVrZsLu8=
Subject key identifier:   60:61:B2:97:31:9E:3A:CC:C5:64:B7:DD:5B:C1:01:AE:B3:7B:54:D0
Certificate issuer:       /CN=9144c0a44649b8dc574f61d431e56ed273ddb9f6
Certificate serial:       1B0218
Authority key identifier: 0A:D2:57:82:E6:5F:1E:8C:1A:97:DE:1E:55:72:B0:30:BE:31:ED:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9144c0a44649b8dc574f61d431e56ed273ddb9f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/b08bf78f50afc3050da468b788897077af313a27.roa
Signing time:             Wed 10 May 2023 16:06:29 +0000
ROA not before:           Tue 09 May 2023 16:06:29 +0000
ROA not after:            Sat 10 May 2025 16:06:29 +0000
asID:                     265695
IP address blocks:        45.5.8.0/22 maxlen: 24
                          2803:9c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1770008 (0x1b0218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9144c0a44649b8dc574f61d431e56ed273ddb9f6
        Validity
            Not Before: May  9 16:06:29 2023 GMT
            Not After : May 10 16:06:29 2025 GMT
        Subject: CN=b08bf78f50afc3050da468b788897077af313a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:99:ea:64:eb:9e:3d:ba:de:94:3b:64:13:
                    33:0a:84:7a:86:20:03:2c:8c:bd:1d:ae:fc:83:66:
                    64:e8:6b:ac:7a:ee:99:1d:51:55:d8:a2:b2:50:52:
                    9c:0a:cf:95:16:24:aa:3f:03:21:e2:bf:bc:c6:41:
                    2a:cc:ed:d4:fa:ba:9c:b4:64:76:e1:74:67:b1:20:
                    e8:bd:d6:d6:4e:01:68:96:2d:0a:0c:95:e8:ae:6b:
                    d0:c1:42:ba:67:78:2f:ca:15:bb:87:73:14:3f:9b:
                    7f:5a:d2:2b:db:10:c3:92:78:95:bb:ea:89:46:c0:
                    a7:9e:6c:36:b4:8a:7c:9a:f3:17:43:09:02:f7:bf:
                    5c:a6:d1:4a:99:a5:10:74:a3:c9:b3:74:00:fb:73:
                    fc:d1:aa:36:33:d6:f9:4c:09:08:63:a8:50:e1:ee:
                    f6:b8:cb:44:f6:48:af:c2:51:17:40:76:91:14:00:
                    16:36:b4:04:18:ad:01:88:05:d2:2c:74:97:cb:26:
                    27:66:f4:80:82:71:64:9b:44:69:14:fd:52:ce:0a:
                    ca:26:c2:04:33:fa:16:b8:b7:a4:83:47:46:04:7d:
                    07:b6:77:be:2a:61:42:46:3b:c7:18:25:8a:a7:4d:
                    08:6d:ea:16:18:9e:94:62:51:d4:bb:5b:db:1f:58:
                    16:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:61:B2:97:31:9E:3A:CC:C5:64:B7:DD:5B:C1:01:AE:B3:7B:54:D0
            X509v3 Authority Key Identifier:
                keyid:0A:D2:57:82:E6:5F:1E:8C:1A:97:DE:1E:55:72:B0:30:BE:31:ED:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9144c0a44649b8dc574f61d431e56ed273ddb9f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/b08bf78f50afc3050da468b788897077af313a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/9144c0a44649b8dc574f61d431e56ed273ddb9f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.8.0/22
                IPv6:
                  2803:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:38:54:11:51:0b:94:07:c4:41:0c:b3:ce:35:b8:fb:91:6a:
         a4:92:82:77:fc:fe:e3:dd:77:63:fe:3a:e5:b4:d8:67:ae:10:
         a9:f3:66:c0:bb:e8:31:2b:89:85:25:c3:0f:5f:92:26:4b:f4:
         bf:51:15:13:b3:f7:2e:92:17:f0:49:1c:b8:35:33:dd:28:ca:
         54:59:e2:7d:bf:47:39:9f:20:a3:22:37:85:53:c1:d8:ee:54:
         ea:0f:bf:24:fe:68:50:05:b8:46:63:5c:a1:66:dd:7c:30:43:
         bd:b6:28:1a:ad:c5:ad:b9:3e:d6:39:ba:47:b3:5c:6d:7d:d4:
         80:ed:3a:bb:4f:5f:f6:19:c9:8b:24:62:42:26:11:47:0a:1d:
         d4:1d:27:7e:3a:84:0d:89:e1:af:f2:e1:cd:41:29:d9:3f:3c:
         29:e8:07:86:a9:b6:39:64:91:fc:fe:51:33:db:b0:92:38:57:
         19:c1:dd:25:3e:2d:5b:ef:56:35:c4:0e:9f:57:d6:23:d4:8e:
         52:bf:41:e1:38:35:49:96:b0:14:8a:2d:c5:7e:b6:72:e3:16:
         83:0f:4b:43:51:e9:bb:5f:25:6f:34:03:6f:c0:31:9f:a2:23:
         8b:4f:91:f2:ac:14:3e:60:e5:d7:92:7c:3d:2c:af:87:d9:0b:
         a8:25:db:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----